Siemens COMOS

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens Comos Buffer Overflow Vulnerability

Siemens Comos is a plant engineering software solution from Siemens, a German company. Siemens Comos, used in the process industry, is vulnerable to a buffer overflow vulnerability that stems from a boundary error when handling untrusted input. An attacker could use this vulnerability to execute...

CISA Releases Fifteen Industrial Control Systems Advisories

CISA released fifteen 15 Industrial Control Systems ICS advisories on February 16, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories f...

The vulnerability of the software cache verification mechanism for the design, operation, and maintenance of COMOS technological installations allows a perpetrator to execute arbitrary code.

The vulnerability of the software cache verification mechanism for the design, operation, and maintenance of COMOS technological installations is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary co...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

Design/Logic Flaw

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

CVE-2023-24482

CVE-2023-24482 affects Siemens COMOS, with SEH-based buffer overflow in the Cache validation service across V10.2 all versions through V10.4.2.0.25 (and older subreleases prior to fixed builds). Exploitation could lead to remote arbitrary code execution or denial of service. Siemens/Siemens Produ...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

Siemens Comos 安全漏洞

Siemens Comos is a plant engineering software solution from Siemens, a German company. Siemens Comos, used in the process industry, is vulnerable to a buffer overflow vulnerability that stems from a boundary error when handling untrusted input. An attacker could use this vulnerability to execute...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in Scalance, among others, TIA, SiPass, SIMATIC, COMOS, Brownfield, JT Open Toolkit, Mendix, RuggedCom and Solid Edge. The vulnerabilities would allow a malicious potentially able to launch attacks that result in the following categories of damage:...

Siemens COMOS

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens COMOS

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: COMOS Vulnerabilities: Memory Allocation with Excessive Size Value, Untrusted Pointer Dereference, Type Confusion, Stack-based Buffer Overflow, Out-of-bounds Write, Out-of-bounds Read, Use After Free,...

Siemens Comos code issue vulnerability

Siemens Comos is a plant engineering software solution from Siemens, a German company. A code issue vulnerability exists in Siemens Comos version V10.2, which stems from the COMOS Web component of COMOS allowing the upload and storage of arbitrary files on a Web server. An attacker could exploit...

CVE-2021-37194

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS allows to upload and store...

CVE-2021-37194

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS allows to upload and store...

Design/Logic Flaw

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS allows to upload and store...

CVE-2021-37194

CVE-2021-37194 affects Siemens COMOS, specifically the COMOS Web component. The vulnerability arises from an unrestricted upload mechanism that allows uploading and storing arbitrary files on the web server, enabling attackers to place malicious files. Affected are COMOS Web-enabled deployments: ...

CVE-2021-37194

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS allows to upload and store...